Care and Growth Plan
Hosting oversight, uptime and error monitoring, small changes and priority support, so someone is watching when a provider has a bad day.
See the Care and Growth Plan
Back to Free tools
Free tool / Business continuity
Single point of failure check for your business.
On 12 and 13 November 2026 a Microsoft 365 outage cut businesses around the world off from Outlook and other Microsoft services. Enter your domain to see what else one outage could take down.
TL;DR
Most small businesses rent their email, staff sign-in, DNS and website from a handful of companies. When one company runs two or more of those layers, a single outage at that company stops all of them at once. This free check reads your public DNS records, names the company behind each layer, flags any concentration, and gives you a risk score out of 100 with the fixes to make first. No sign-up, nothing installed, and scans are not stored.
Risk score for
/100
What each layer depends on
What to fix first
Report sent. Check your inbox in a minute or two. If it is not there, look in your junk or spam folder and mark it as not junk, so future emails from us reach your inbox.
Next step
Ongoing / From $300 USD per month
Plan first / $499 USD, credited in full toward your project
Want this fixed?
The Resilience Check looks at your whole setup: renewals, who holds each login, recovery, email security and backups, with the risks ranked and the first change to make. $299 USD, usually 2 to 4 business days. Fixes are quoted before any work starts.
Project Blueprint
Planning a bigger change, such as moving DNS, email or hosting? Get scoped requirements, a recommended architecture and a fixed quote.
See the Project Blueprint
How it works
Public DNS in, plain English out.
- Email. MX records show who receives your mail. SPF, DKIM and autodiscover records confirm the mailbox provider and list the services that send email as you.
- Staff sign-in. Microsoft and Google mailboxes come with their sign-in systems. Device registration and verification records add more signals.
- DNS. Name server records show which company answers for your domain. If DNS fails, your website and email fail with it.
- Website. The www record and the network that owns your website's IP address (looked up through Team Cymru's public service) show where the site is served from.
- SaaS footprint. Verification records left by tools such as Atlassian, DocuSign or Zoom show other services your team relies on.
Then it checks whether any one company runs two or more of the critical layers (email, staff sign-in, DNS and website). That is the headline finding, because it is how one outage becomes a full stop.
The risk score, in full
Higher means more risk. Every point added or removed is listed with your results.
- +10 Starting point: every business depends on outside providers
- +40 One vendor controls 3 or more critical layers
- +25 One vendor controls 2 critical layers
- +10 A second vendor also controls 2 or more critical layers
- +20 No DMARC record
- +10 DMARC policy is p=none (monitoring only)
- +10 No SPF record
- +10 All name servers are with one DNS provider
- -10 Email, DNS and website each use a different vendor
This is an indicator, not an audit. It reads public DNS only, so it cannot see contracts, backups, private networks, or single sign-on setups that leave no DNS trace. A proxy such as Cloudflare can also hide the server behind a website.
Frequently asked questions
What is a single point of failure for a business?
It is one supplier or system that, if it stops working, takes several parts of your business down with it. A common example is one company running your email, staff sign-in and DNS, so a single outage stops email, logins and your website at once.
Would the November 2026 Microsoft 365 outage have affected my business?
If the scan shows Microsoft for your email or staff sign-in, then yes: on 12 and 13 November 2026 many businesses on Microsoft 365 could not reach Outlook and other Microsoft 365 services. If Microsoft also runs your DNS or website, those layers depend on the same company too.
How is the risk score calculated?
It starts at 10. It adds 25 points when one vendor runs two critical layers (40 for three or more), 10 if a second vendor also does, 20 for no DMARC record (10 if DMARC only monitors), 10 for no SPF record and 10 when all name servers are with one DNS provider. It takes off 10 when email, DNS and website each use a different vendor. The result is capped between 0 and 100.
Does the scanner access my systems or store my domain?
No. It only reads public DNS records, the same ones any email server or browser reads, through Cloudflare's public DNS over HTTPS service. It never logs in anywhere or visits your website. Results are cached for one hour so repeat scans are fast, then discarded. Domains are not stored. If you ask for an emailed copy, your email address, the domain and your score are kept so the report can be sent and followed up once.
How do I reduce single points of failure?
Keep DNS with a different company from your email and website, have a backup way to reach staff and customers, publish SPF and DMARC, keep emergency admin accounts that do not depend on single sign-on, and write a one-page plan for who does what during an outage.